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Abstract 

With the previous notions of bisimulation presented in literature, to check if two quan- 
tum processes are bisimilar, we have to instantiate the free quantum variables of them with 
arbitrary quantum states, and verify the bisimilarity of resultant configurations. This makes 
checking bisimilarity infeasible from an algorithmic point of view, because quantum states con- 
stitute a continuum. In this paper, we introduce a symbolic operational semantics for quantum 
processes directly at the quantum operation level, which allows us to describe the bisimulation 
between quantum processes without resorting to quantum states. We show that the symbolic 
bisimulation defined here is equivalent to the open bisimulation for quantum processes in the 
previous work, when strong bisimulations are considered. An algorithm for checking symbolic 
ground bisimilarity is presented. We also give a modal logical characterisation for quantum 
bisimilarity based on an extension of Hennessy-Milner logic to quantum processes. 

1 Introduction 

An important issue in quantum process algebra is to discover a quantum generalisation of bisim- 
ulation preserved by various process constructs, in particular, parallel composition, where one of 
the major differences between classical and quantum systems, namely quantum entanglement, is 
present. Jorrand and Lalirc [13, 15] defined a branching bisimulation for their Quantum Process Al- 
gebra (QPAlg), which identifies quantum processes whose associated graphs have the same branching 
structure. However, their bisimulation cannot always distinguish different quantum operations, as 
quantum states are only compared when they are input or output. Moreover, the derived bisimilarity 
is not a congruence; it is not preserved by restriction. Bisimulation defined in [7] indeed distinguishes 
different quantum operations but it works well only for finite processes. Again, it is not preserved 
by restriction. In [20] , a congruent bisimulation was proposed for a special model where no classical 
datum is involved. However, as many important quantum communication protocols such as super- 
dense coding and teleportation cannot be described in that model, the scope of its application is 
very limited. 

A general notion of bisimulation for the quantum process algebra qCCS developed by the authors 
was found in [8], which enjoys the following nice features: (1) it is applicable to general models 
where both classical and quantum data are involved, and recursion is allowed; (2) it is preserved 
by all the standard process constructs, including parallel composition; and (3) quantum operations 
are regarded as invisible, so that they can be combined arbitrarily. Independently, a bisimulation 
congruence in Communicating Quantum Processes (CQP), developed by Gay and Nagarajan [11], 
was established by Davidson [5]. Later on, motivated by [18], an open bisimulation for quantum 
processes was defined in [6] that makes it possible to separate ground bisimulation and the closcdncss 



under super-operator applications, thus providing not only a neater and simpler definition, but also 
a new technique for proving bisimilarity. 

The various bisimulations defined in the literature, however, have a common shortcoming: they 
all resort to the instantiation of quantum variables by quantum states. As a result, to check whether 
or not two processes are bisimilar, we have to accompany them with an arbitrarily chosen quantum 
states, and check if the resultant configurations are bisimilar. Note that all quantum states constitute 
a continuum. The verification of bisimilarity is actually infeasible from an algorithmic point of view. 
The aim of the present paper is to tackle this problem by the powerful symbolic technique [12, 4]. 
This paper only considers qCCS, but the ideas and techniques developed here apply to other quantum 
process algebras. 

As a quantum extension of value-passing CCS, qCCS has both (possibly infinite) classical data 
domain and (doomed-to-be infinite) quantum data domain. The possibly infinite classical data set 
can be dealt with by symbolic bisimulation [12] for classical process algebras directly. However, 
in qCCS, we are also faced with the additional difficulty caused by the infinity of all quantum 
states. The current paper solves this problem by introducing super-operator valued distributions, 
which allows us to fold the operational semantics of qCCS into a symbolic version and provides us 
with a notion, also called symbolic bisimulation for simplicity, where to check the bisimilarity of 
two quantum processes, only a finite number of process-superoperator pairs need to be considered, 
without appealing to quantum states. To be specific, we propose 

• a symbolic operational semantics of qCCS in which quantum processes are described directly 
by the super-operators they can perform. It also incorporates a symbolic treatment for classical 
data. 

• a notion of symbolic bisimulation, based on the symbolic operational semantics, as well as an 
efficient algorithm to check its ground version; 

• the coincidence of symbolic bisimulation with the open bisimulation defined in [6] , when strong 
bisimulation is considered. 

• a modal characterisation of symbolic bisimulation by a quantum logic as an extension of 
Hcnncssy-Milner logic. 

The remainder of the paper is organised as follows. In Section 2, we review some basic notions 
from linear algebra and quantum mechanics. The syntax and (ordinary) operational semantics of 
qCCS are presented in Section 3. We also review the definition of open bisimulation presented 
in [6]. Section 4 collects some definitions and properties of the semiring of completely positive 
super-operators. The notion of super-operator valued distributions, which serves as an extension of 
probabilistic distributions, is also defined. Section 5 is the main part of this paper where we present 
a symbolic operational semantics of qCCS which describes the execution of quantum processes 
without resorting to concrete quantum states. Based on it, symbolic bisimulation between quantum 
processes, which also incorporates a symbolic treatment for classical data, motivated by symbolic 
bisimulation for classical processes, is presented and shown to be equivalent to the open bisimulation 
in Section 3. Section 6 is devoted to proposing an algorithm to check symbolic ground bisimulation, 
which is applicable to reasoning about the correctness of existing quantum communication protocols. 
In section 7 we propose a modal logic which turns out to be both sound and complete with respect 
to the symbolic bisimulation. We outline the main results in Section 8 and point out some directions 
for further study. In particular, we suggest the potential application of our results in model checking 
quantum communication protocols. 
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2 Preliminaries 



For convenience of the reader, we briefly recall some basic notions from linear algebra and quantum 
theory which are needed in this paper. For more details, we refer to [16]. 

2.1 Basic linear algebra 

A Hilbert space H is a complete vector space equipped with an inner product 

(•!•) :HxH^C 

such that 

(1) {ip\ip) > for any \tp) £ H, with equality if and only if \ip) = 0; 

(2) = (V#>*; 

(3) (^|EiCi|^>=EiCi<^>, 

where C is the set of complex numbers, and for each c £ C, c* stands for the complex conjugate of 
c. For any vector \ip) £ H, its length |||^>)|| is defined to be y/ {tp\tp}, and it is said to be normalized 
if 1 1 \ip) 1 1 = 1. Two vectors \tp) and \<j)) are orthogonal if (tp\4>) = 0. An orthonormal basis of a Hilbert 
space H is a basis {|i}} where each |i) is normalized and any pair of them are orthogonal. 

Let C(H) be the set of linear operators on H. For any A £ C(H), A is Hermitian if A' = A where 
A> is the adjoint operator of A such that (il)\A^\(j)) = for any \<f>) £ H. The fundamental 

spectral theorem states that the set of all normalized eigenvectors of a Hermitian operator in C(H) 
constitutes an orthonormal basis for H. That is, there exists a so-called spectral decomposition for 
each Hermitian A such that 

A = Y,Mi){i\= Y, KEl 

i \i€spec(A) 

where the set {\i}} constitute an orthonormal basis of H, spec(A) denotes the set of eigenvalues 
of A, and E% is the projector to the corresponding eigenspace of A;. A linear operator A £ C(H) 
is unitary if A^ A = AA^ = 1% where Iu is the identity operator on H. The trace of A is defined 
as tr(A) = EiW^I*) f° r some given orthonormal basis {\i)} of H. It is worth noting that trace 
function is actually independent of the orthonormal basis selected. It is also easy to check that trace 
function is linear and tr(AB) = tr(BA) for any operators A,B£ C(H). 

Let Hi and Hi be two Hilbert spaces. Their tensor product Hi <8> Hi is defined as a vector space 
consisting of linear combinations of the vectors IV'iV'2) = l^i)!^) = ® IV^) with £ Hi and 
\^>i) £ Hi- Here the tensor product of two vectors is defined by a new vector such that 

Then Hi <E> Hi is also a Hilbert space where the inner product is defined as the following: for any 
EHi and £ H 2 , 

(-01 (g) tp 2 \4>i <8> 4>i) = (V , i|^i)wi (ih\(h)n2 

where (-\-)ui is the inner product of Hi- For any A x £ C(Hx) and A 2 £ C(H 2 ), A\ ® A 2 is defined 
as a linear operator in C(Hi (E> Hi) such that for each \ipi) £ Hi and \ip2) G 

(Ai ^2)^1^2) = Ail^i) ® A 2 |V>2>. 
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The partial trace of A e L{T-L\ <g> H2) with respected to T-L\ is defined as ti-u^A) = '}2, i {i\A\i) where 
{\i)} is an orthonormal basis of Hi. Similarly, we can define the partial trace of A with respected 
to %2- Partial trace functions are also independent of the orthonormal basis selected. 

Traditionally, a linear operator £ on C(1~L) is called a super-operator on %. A super-operator is 
said to be completely positive if it maps positive operators in C(H) to positive operators in C{Tl), 
and for any auxiliary Hilbert space H' , the trivially extended operator T-^ ® £ also maps positive 
operators in C(H' <£> H) to positive operators in C(H' <£> H). Here lu 1 is the identity operator on 
C{T-L'). The elegant and powerful Kraus representation theorem [14] of completely positive super- 
operators states that a super-operator £ is completely positive if and only if there are some set of 
operators {Ei : i € 7} with appropriate dimension such that 



£(A) = ^E i AEl 



for any A 6 £("%)• The operators £7j are called Kraus operators of £ . We abuse the notation 
slightly by denoting £ = {Ei : i € /}. A super-operator £ is said to be trace- nonincr easing if 
tr(£(v4)) < tr(A) for any positive A £ and trace-preserving if the equality always holds. 

Equivalently, a super-operator is trace-nonincreasing completely positive (rcsp. trace-preserving 
completely positive) if and only if its Kraus operators Ei satisfy Y^i E^Ei < I (resp. J^i E\Ei — I). 
In this paper, we will use some well-known (unitary) super-operators listed as follows: the quantum 
control- not super-operator CN = {Cn} performed on two qubits where 



Cn = 



( 1 ^ 

10 

1 

\ 1 / 



the 1-qubit Hadamard super-operator % = {H}, and Pauli super-operators cr° = {h}, 
{A}, a 2 = {Z}, and a 3 = {Y} where 



H = 



V2 



h = 



1 
1 



We also use the notations X, Z, and y to denote a 1 , a 2 , and cr 3 , respectively. 



2.2 Basic quantum mechanics 

According to von Neumann's formalism of quantum mechanics [19], an isolated physical system is 
associated with a Hilbert space which is called the state space of the system. A pure state of a 
quantum system is a normalized vector in its state space, and a mixed state is represented by a 
density operator on the state space. Here a density operator p on Hilbert space T~L is a positive linear 
operator such that tr(p) = 1. Another equivalent representation of density operator is probabilistic 
ensemble of pure states. In particular, given an ensemble {{pi, \ipi})} where pi > 0, YliPi = 1; an d 
l^j) are pure states, then p = Y i Pi^i)} is a density operator. Here denotes the abbreviation 

of \ipi)(ipi\. Conversely, each density operator can be generated by an ensemble of pure states in this 
way. The set of density operators on H can be defined as 

T)(H) = { p e C(H) : p is positive and tr(p) = 1}. 
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The state space of a composite system (for example, a quantum system consisting of many qubits) 
is the tensor product of the state spaces of its components. For a mixed state p on Hi <E) H2, partial 
traces of p have explicit physical meanings: the density operators tr^p and tr^ 2 p are exactly the 
reduced quantum states of p on the second and the first component system, respectively. Note that 
in general, the state of a composite system cannot be decomposed into tensor product of the reduced 
states on its component systems. A well-known example is the 2-qubit state 

l*> = -L(|oo) + |ii)) 

which appears repeatedly in our examples of this paper. This kind of state is called entangled state. 
To see the strangeness of entanglement, suppose a measurement M = Ao[|0)] + Ai [| 1)] is applied on 
the first qubit of |^) (see the following for the definition of quantum measurements). Then after 
the measurement, the second qubit will definitely collapse into state |0) or |1) depending on whether 
the outcome Ao or Ai is observed. In other words, the measurement on the first qubit changes the 
state of the second qubit in some way. This is an outstanding feature of quantum mechanics which 
has no counterpart in classical world, and is the key to many quantum information processing tasks 
such as teleportation [2] and super-dense coding [3]. 

The evolution of a closed quantum system is described by a unitary operator on its state space: 
if the states of the system at times t\ and ti are p\ and P2, respectively, then P2 = Up±U' for some 
unitary operator U which depends only on t\ and t^. In contrast, the general dynamics which can 
occur in a physical system is described by a trace-preserving super-operator on its state space. Note 
that the unitary transformation U (p) = U pU^ is a trace-preserving super-operator. 

A quantum measurement is described by a collection {M m } of measurement operators, where the 
indices to refer to the measurement outcomes. It is required that the measurement operators satisfy 
the completeness equation J2 m M^Mm = In- If the system is in state p, then the probability that 
measurement result m occurs is given by 

p(m) = tr{M} n M m p), 

and the state of the post-measurement system is M m pMl l /p(m). 

A particular case of measurement is projective measurement which is usually represented by a 
Hcrmitian operator. Let M be a Hermitian operator and 

m= mE ™ w 

m£spec(M) 

its spectral decomposition. Obviously, the projectors {E m : m € spec(M)} form a quantum mea- 
surement. If the state of a quantum system is p, then the probability that result to occurs when 
measuring M on the system is p(m) — ti(E m p), and the post-measurement state of the system is 
E m pE m /p(rn). Note that for each outcome to, the map 

£m(p) = E m pE m 

is again a super-operator by Kraus Theorem; it is not trace-preserving in general. 

Let M be a projective measurement with Eq.(l) its spectral decomposition. We call M non- 
degenerate if for any to € spec(M), the corresponding projector E m is 1-dimcnsional; that is, all 
eigenvalues of M are non-degenerate. Non-degenerate measurement is obviously a very special case 
of general quantum measurement. However, when an ancilla system lying at a fixed state is provided, 
non-degenerate measurements together with unitary operators arc sufficient to implement general 
measurements . 
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3 qCCS: Syntax and Semantics 



In this section, we review the syntax and semantics of a quantum extension of value-passing CCS, 
called qCCS, introduced in [7, 20, 8], and the definition of open bisimulation between qCCS processes 
presented in [6]. 



3.1 Syntax 

We assume three types of data in qCCS: Bool for booleans, real numbers Real for classical data, and 
qubits Qbt for quantum data. Let cVar, ranged over by x, y, . . . , be the set of classical variables, 
and qVar, ranged over by q, r, . . . , the set of quantum variables. It is assumed that cVar and qVar 
are both countably infinite. We assume a set Exp of classical data expressions over Real, which 
includes cVar as a subset and is ranged over by e,e', . . . , and a set of boolean- valued expressions 
BExp, ranged over by b, b', . . . , with the usual set of boolean operators tt, ff , ->, A, V, and — >. 
In particular, we let e cxi e' be a boolean expression for any e, e' € Exp and [XG {>, <, >, <, =}• 
We further assume that only classical variables can occur free in both data expressions and boolean 
expressions. Let cChan be the set of classical channel names, ranged over by c, d, . . . , and qChan 
the set of quantum channel names, ranged over by c,d,.... Let Chan = cChan U qChan. A 
relabeling function / is a one to one function from Chan to Chan such that f(cChan) C cChan 
and f(qChan) C qChan. 

We often abbreviate the indexed set {q\, ...,q n } to q when qi,...,q n are distinct quantum 
variables and the dimension n is understood. Sometimes we also use gto denote the string q\.,.q n . 
We assume a set of process constant schemes, ranged over by A,B, . . . . Assigned to each process 
constant scheme A there are two non- negative integers ar c {A) and ar q (A). If a; is a tuple of classical 
variables with |2; | = ar c (A), and q a tuple of distinct quantum variables with \q\ = ar q {A), then 
A(x, q) is called a process constant. When ar c (A) = ar q (A) = 0, we also denote by A the (unique) 
process constant produced by A. 

Based on these notations, the syntax of qCCS terms can be given by the Backus-Naur form as 

t ::= nil | A(e, q) \ a.t \t + t \ t\\t \ t\L \ t[f] | if b then t 
a ::= r | clx \ cle \ zlq \ dq \ £\q\ \ M[q;x] 

where c € cChan, x £ cVar, c G qChan, q € qVar, q C qVar, e G Exp, e C Exp, r is the silent 
action, A(x, q) is a process constant, / is a relabeling function, L C Chan, b 6 BExp, and £ and 
M are respectively a trace-preserving super-operator and a non-degenerate projective measurement 
applying on the Hilbert space associated with the systems q. In this paper, we assume all super- 
operators are completely positive. 

To exclude quantum processes which arc not physically implementable, we also require q ^ qv(t) 
in clq.t and qv(t) Pi qv(u) = in t\\u, where for a process term t, qv(t) is the set of its free quantum 
variables inductively defined as follows: 

gu(nil) = qv(r.t) = qv(t) 

qv(clx.t) = qv(t) qv(c\e.t) = qv(t) 

qv(c7q.t) = qv(t) - {q} qv{dq.t) = qv(t) U {q} 

qv{£[q\.t) = qv(t)\Jq qv(M[q;x].t) = qv(t) U q 

qv(t + u) = qv(t)Uqv(u) qv(t\\u) = qv(t)Uqv(u) 

qv(t[f]) - qv(t) qv(t\L) = qy{t) 

qv(ii b then t) = qv(t) qv(A(e,q)) = q. 

The notion of free classical variables in quantum processes, denoted by fv(-), can be defined in the 
usual way with the only modification that the quantum measurement prefix M[q;x] has binding 
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power on x. A quantum process term t is closed if it contains no free classical variables, i.e., 
fv(t) = 0. We let T, ranged over by t, u, ■ ■ ■ , be the set of all qCCS terms, and V , ranged over by 
P,Q, - ■ ■ , the set of closed terms. To complete the definition of qCCS syntax, we assume that for 
each process constant A{x,q), there is a defining equation 

A(x,q) d = f t 

such that fv(t) C x and qv(P) C q. Throughout the paper we implicitly assume the convention 
that process terms are identified up to a-conversion. 

The process constructs we give here are quite similar to those in classical CCS, and they also have 
similar intuitive meanings: nil stands for a process which does not perform any action; c!x and c!e are 
respectively classical input and classical output, while clq and c!g are their quantum counterparts. 
£[q\ denotes the action of performing the super-operator £ on the qubits q while M[q;x] measures 
the qubits q according to M and stores the measurement outcome into the classical variable x. + 
models nondeterministic choice: t + u behaves like either t or u depending on the choice of the 
environment. || denotes the usual parallel composition. The operators \L and [/] model restriction 
and relabeling, respectively: t\L behaves like t as long as any action through the channels in L 
is forbidden, and t[f] behaves like t where each channel name is replaced by its image under the 
relabeling function /. Finally, if b then t is the standard conditional choice where t can be executed 
only if b is tt. 

An evaluation ip is a function from cVar to Real; it can be extended in an obvious way to 
functions from Exp to Real and from BExp to {tt,ff}, and finally, from T to V . For simplicity, 
we still use tf> to denote these extensions. Let ip{v/x} be the evaluation which differs from ijj only 
in that it maps x to v. 



3.2 Transitional semantics 

For each quantum variable q G qVar, we assume a 2-dimensional Hilbert space W q to be the state 
space of the g-system. For any S C qVar, we denote 

Us = §§U q . 

qes 

In particular, H = H q var is the state space of the whole environment consisting of all the quantum 
variables. Note that H is a countably-infinite dimensional Hilbert space. 

Suppose P is a closed quantum process. A pair of the form (P, p) is called a configuration, where 
p G T>{'H) is a density operator on %. The set of configurations is denoted by Con, and ranged over 
by C,V, ■ ■ ■ . Let 

Act c = {t} U {c?v, civ | c € cChan, v G Real} U {c?r, c!r | c G qChan, r G qVar}. 

For each a G Act c , we define the bound quantum variables qbv(a) of a as qbv(c!r) = {r} and 
qbv(a) = if a is not a quantum input. The channel names used in action a is denoted by cn(a); 
that is, cn(c?v) — cn(c\v) — {c}, cn(c?r) = cn(c\r) = {c}, and cn(r) = 0. We also extend the 
relabelling function to Act c in an obvious way. 

Let Dist{Con), ranged over by fx, v, ■ ■ ■ , be the set of all finite-supported probabilistic distribu- 
tions over Con. Then the operational semantics of qCCS can be given by the probabilistic labelled 
transition system (pLTS) (Con, Act c , i — where i — > C Con x Act c x Dist(Con) is the smallest re- 
lation satisfying the inference rules depicted in Fig. 1. The symmetric forms for rules Par c , C-Com c , 
Q-Com c , and Sum c are omitted. 

In these rules, we abuse the notation slightly by writing C i — > T> if C fx where \x is the 
simple distribution such that fx(V) = 1. We also use the obvious extension of the function || 
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Tau c C-Inp c - 

(t.P, p) .— » (P, p) ( c ? x . t , p) £A (t{v/x}, p) 

r £ qv(c?q.P) 



Def c 



C-Out c Q-Inp c 

(de.P, p) ^ (P, p) (clq.P, p) ^ {P{r/q}, p) 

Q-Out c : Oper. 



(dq.P,p)A{P,p) ' (£[r\.P, P )^(P,£r(p)) 

„ M = '£ ieI X i E i , Pi =ti(Eip) (P u p)^ p, qbv(a)nqv(P 2 ) 

M eas r Par r 



(M[r;x].P,p)^'£ iBlPi {P{X i /x},El : pEL/p i ) ' (P^, p) ^ p\\P 2 

c _ Comc (PuP)&XPj,P), (p^UfkA Q . Comc (PuA^LA (^A^MiA 
(P 1 \\p 2 ,p)^(p{\\pi,p) (P 1 \\p 2 ,p)^(pl\\pi,p) 

Sum c — - Rel c 



(p + Q,p)^p {P[flp) mp[f] 

ChQ (P, p) ^ p, M = tt ^ (P, p) ^ p, cn(a) n L = I 



(if 6 then P,p)^ p (P\L, p) ^ //\L 

r/g}, g) /i, A(x, q) d = t 
(A(v,r),p) At 

Figure 1: Operational semantics of qCCS 

on configurations to distributions. To be precise, if fi = \^2 ieI Pi{Pi, Pi) then fj,\\Q denotes the 
distribution ^Z^j Pi{P%\Q , Pi) ■ Similar extension applies to /j,[f] and p\L. 



3.3 Open bisimulation 

In this subsection, we recall the basic definitions and properties of open bisimulation introduced 
in [6]. Let 1Z C Con x Con be a relation on configurations. We can lift 72. to a relation on Dist(Con) 
by writing f/IZv if 

(!) M = Ei 6 /PA> 

(2) for each i £ 7, CiRSDi for some 2?^, and 

(3) ^ = Eie/PiA- 

Note that here the set of Cj,i £ I, are not necessarily distinct. 

Definition 3.1. A symmetric relation 1Z C Con x CW is called a (strong) open bisimulation if for 
any (P,p), (Q,cr) £ Con, (P, p)1Z(Q , a) implies that 

(1) qv(P) = qv(Q), and tr qv{P) (p) = ti qv{Q) (a), 

(2) for any trace-preserving super- operator £ acting on T~L qv ^ , whenever (P,£(p)) fi, there 
exists v such that (Q,£(a)) t-—} v and plZv. 
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(P,p) 



(l[g].nil,|0),(0|®tr,(p)> 



(nil,|0) 9 (0|®tr 9 (p)) 



(Q,p) 

T 

(Qo, |0> g (0| ® tr 9 (p)) (Q u \l) q (l\ ® tr ? (p)> 



(nil, |0),<0| ® tr„(p)> (nil, |0),(0| ® tr 9 (p)> 



Figure 2: pLTSs for the two ways of setting a quantum system to |0) 



Definition 3.2. (1) Two quantum configurations (P, p) and (Q,o~) are open bisimilar, denoted by 
(P, p) ~ (Q,o~), if there exists an open bisimulation 1Z such that (P, p)lZ(Q, a); 

(2) Two quantum process terms t and u are open bisimilar, denoted byt^u, if for any quantum 
state p £ T>{fhi) and any evaluation ip, (tip,p) ~ (uip,p). 

To illustrate the operational semantics and open bisimulation presented in this section, we give 
a simple example. 

Example 3.3. This example shows two alternative ways of setting a quantum system to the pure 
state |0). Let P d = Set°[q].l[q}. nil and 

def 

Q = Mo,i[<7; x].(if x = then I[q].nil + if x = 1 then <Y[g].nil), 

where Set = {|0)(0|, |0)(1|}, Mo,x is the 1-qubit measurement according to the computational basis 
{|0), |1)}, T is the identity super-operator, and X is the Pauli-X super-operator. For any p 6 T>{H), 
the pLTSs rooted by (P, p) and (Q, p) respectively are depicted in Fig. 2 where 

Qo = if = then l[q\. nil + if = 1 then X \q\. nil, 
Qi = if 1 = then l[q\. nil + if 1 = 1 then X[q\. nil, 

and pi = tr(\i) q (i\p). We can show P ~ Q by verifying that the relation TZ U 7?. -1 , where 

n = {((P, p), (Q,p)), ((I[q].nil, po), (Qo, po}), ((![<?]. nil, p ), (Qi, P i)), ((nil, Po ), (nil, p )) : p € V(H)} 

and pi = \i) q (i\ <2> tr q p, is an open bisimulation. 



4 Super-operator Valued Distributions 

4.1 Semiring of super-operators 

We denote by CP^H) the set of super-operators on H, ranged over by A,B, ■ ■ ■ . Obviously, both 
(CP(H),0-n,+) and (CP^H.),I-n,°) are monoids, where T-h and 0-^ are the identity and null super- 
operators on H, respectively, and o is the composition of super-operators defined by (.4 o B)(p) = 
A(B(p)) for any p £ V(H). We alway omit the symbol o and write AB directly for AoB. Furthermore, 
the operation o is (both left and right) distributive with respect to +: 

A(B l + B 2 ) = ABi + AB 2 , (B l + B 2 )A = B X A + B 2 A. 
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Thus (CP(K),+,o) forms a semiring. 

For any A,B £_CP(H) and V C gVar, we write .4 <y £ if for any p e tr F („4(p)) C 

try-(S(p)), where V is the complement set of V in qVar, and C is the Lowner preordcr defined 
on operators such as A IZ B if and only if B — A is positive semi-definite. Let ~y be <y n >V 
We usually abbreviate <0 and ~0 to < and ~, respectively. It is easy to check that if A and 
B have Kraus operators {Ai : i € 1} and {Bj : j G J} respectively, then A < S if and only if 
Sig/ — SjeJ j^j- The following proposition is direct from definitions: 

Proposition 4.1. Let 4 and 6 G CP{H). Then 

(1) A ~ I-h a^rf onZy i/»4 is trace-preserving, i.e., tr(A(p)) = tr(p) for any p G T>{'H). 

(2) A ~ Oh if and only if A = Oh- 

The next lemma, which is easy from definition, shows that the equivalence relation ~y is pre- 
served by right application of composition. 

Lemma 4.2. Let A,B,C G CP{U) andVQqVar. If A ~ v B, then AC ~ v BC . 

However, ~ is not preserved by composition from the left-hand side. A counter-example is when 
A is the A-pauli super-operator, and C has one single Kraus operator |0)(0|. Then A ~ 2%, but 
CA ^ CT n since tr(C4(|0)(0|)) = while tr(CZ«(|0)(0|)) = 1. Nevertheless, we have the following 
property which is useful for latter discussion. 

Lemma 4.3. Let A,B G CP{U) and C G CP{H V ) where ^ V C qVar. If A ~y B, i/ien 6ott 
4C ~y i3C and C4 ~y CB. 

Proof. Easy from the fact that tryCA(p) = C{tr v A{p)) when C G CP(H V )- □ 
Let CPt(H) C CP{H) be the set of trace-preserving super-operators, ranged over by f , J 7 , ■ • • . 
Obviously, (CPt(H),lH,°) is a sub-monoid of CP(W) while (CPt('H), Oh, +) is not. It is easy 
to check that for any £, J 7 G CP t (H) and V C oVar, £ <y J 7 if and only if £ ~y J 7 . So for 
trace-preserving super-operators, we usually use the more symmetric form ~y instead of <y. 

4.2 Super-operator valued distributions 

Let S be a countable set. A super-operator valued distribution, or simply distribution for short, A 
over S is a function from S to CP(H) such that J^ses A ( s ) ~ ^H- We denote by [A] the support set 
of A, i.e., the set of s such that A(s) ^ 0-h- Let VistniS) be the set of finite-support super-operator 
valued distributions over 5; that is, 

VistniS) = {A : S -> CP(K) | [A] is finite, and ^ A(s) ~ 

Let A, S, etc range over T>ist-n{S). When A is a simple distribution such that [A] = {s} for some s 
and A(s) = £, we abuse the notation slightly to denote A by £ • s. We further abbreviate Xh • s to 
s. Note that there are infinitely many different simple distributions having the same support {s}. 

Definition 4.4. Given {A, : i G /} C Vist n {S) and {A t : i G 1} C CP{H), Eie/A ~ ^ we 
define the combination, denoted by ^2 ieI Ai • Aj, to be a new distribution A such that 

(1) [A] =U{rA,l :ie/,A^0«}, 

(2) for any s G [A] , A(s) = A »( s ) A- 
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Act s 7 = r,c?xc! e , c ? g , c!g Q ^ 



Meas M = Ziei^M\ Par Mj^A to( 7 )nw u ) = l 

s |M[?;4^|^E, e) 4''WA,A},s e ^| ' d*||«,gpi*>A||u' ?M7)n^(«) = 

C Coms j^gp^jt^gp, (Kg]) 6l 4 e (Kgj Q _ Coms dt.gp^r.^. Kgp^K.g^ 

Sum s Rel s — — 

d* + u,gp-!^A m^V^Alf] 

Cho ^t,£^ b —^A, bv( 1 )nfv(b)=iD ^ (|t,gp-HA, cn( 7 )nL = 

(]if & then t, £\j b ^4 7 A ' flt\L, g} -H A\L 



(|t{e/£,r/g},gp -H A, Ag, g) = 7 t 
^(e,r),gp-HA 



Figure 3: Symbolic operational semantics of qCCS 

Here and in the following of this paper, the index sets /, J, K, etc are all assumed to be finite. 
By Lemma 4.2, it is easy to check that the above definition is well-defined. Furthermore, since ~ 
is not preserved by left applications of composition, we cannot require A(s) = Xae/ -AiAi(s) in the 
second clause, although it seems more natural. As a result, say, £ • (J 7 • s) = TE • s but not £T '• s. 

Probability distributions can be regarded as special super-operator valued distributions by requir- 
ing that all super-operators appeared in the definitions above have the form pin where < p < 1. 
Since in this case all super-operators commute, we always omit the bullet • in the expressions. 

5 Symbolic bisimulation 

5.1 Super-operator weighted transition systems 



We now extend the ordinary probabilistic labelled transition systems to super-operator weighted 
ones. 

Definition 5.1. A super- operator weighted labelled transition system, or quantum labelled transition 
system (qLTS), is a triple (S,Act, — >), where 

(1) S is a countable set of states, 

(2) Act is a countable set of transition actions, 

(3) — >, called transition relation, is a subset of S x Act x T>istu{S). 

For simplicity, we write s — ^> A instead of (s, a, A) G — >. A pLTS may be viewed as a degenerate 
qLTS in which all super-operator valued distributions arc probabilistic ones. 
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5.2 Symbolic transitional semantics of qCCS 



To present the symbolic operational semantics of quantum processes, we need some more notations. 
Let 

Act s = {t} U {c?x, cle | c £ cChan, x £ cVar, e £ Exp} U {c?r, c!r | c £ qChan, r £ gVar} 

and BAct s = BExp x Ac* s . For each 7 £ Aci s , the notion qbv{-~f) for bound quantum variables, 
071(7) for channel names, and fv(p/) for free classical variables are similarly defined as for Act c . We 
also define bv("f), the set of bound classical variables in 7 in an obvious way. 

A pair of the form <\t, £\), where t £ T and £ £ CPt(H), is called a snapshot, and the set of snap- 
shots is denoted by SN. Then the symbolic semantics of qCCS is given by the qLTS (SN, BAct s , — >) 
on snapshots, where — > C SN x BAct s x T)ist-u(SN) is the smallest relation satisfying the rules 
defined in Fig. 3. In Rule Meas s , for each i £ /, Ap £ CP{H) and Sett* £ CP t {H) are defined 
respectively as 

5etp : pH'2j|^i)r(0j|/j|^i)r(^i|. (3) 

j'ei 

The symmetric forms for rules Par s , C-Com s , Q-Com Sl and Sum s are omitted. Here again, the 
functions ||, [/], and \L have been extended to super-operator valued distributions by denoting, say, 
A|ju the super-operator valued distribution X^iej^ • d*i|l u )^D) if A = *}2 ieI Ai • <\ti,£^. 

The transition graph of a snapshot is depicted as usual where each transition l\t, £\) — -4 Y^—i Ai* 
(\ti,£i\) is depicted as 



6,7 




(|ti, fill d*2,f 2 P ••• (1*„,£„P 

We sometimes omit the line marked with 1% for simplicity. 

Example 5.2. (Example 3.3 revisited) For the first example, we revisit the two ways of setting a 
quantum system to pure state |0), presented in Example 3.3. According to the symbolic operational 
semantics presented in Fig. 3, the qLTSs rooted by <\P : Iu\) and l\Q,Xu\) respectively can be depicted 
as in Fig. 4, where Ai has the single Kraus operator \i) q (i\ for i = 0,1. 

At the first glance, it is tempting to think that symbolic semantics provides no advantage in 
describing quantum processes, as the qLTSs in Fig. 4 are almost the same as the pLTSs in Fig. 2 
(Indeed, the right-hand side qLTS in the former is even more complicated than the corresponding 
pLTS in the latter). However, pLTSs in Fig. 2 are depicted for a fixed quantum state p; to characterise 
the behaviours of a quantum process, infinitely many such pLTSs must be given, although typically 
they share the same structure. On the other hand, the qLTSs in Fig. 4 specify all possible behaviours 
of the processes, by means of the super-operators they can perform. 

Example 5.3. This example shows the correctness of super-dense coding protocol. Let M = 
2i=o (*l ^ e a 2-qubit measurement where i is the binary expansion of i. Let CM be the controlled- 
not operation and % Hadamard operation. Then the quantum processes participating in super-dense 
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p[ ff ].nU,S«{9) 



tt,T 



dnil, SetiJ 



tt.T 




(|Qi,s<D 

1 = 0,7"/ i 1.7- 

Inil, Set 




Figure 4: qLTSs for two ways of setting a quantum system to |0) 



c a?9i- (if x = i then u 8 [gi].e!g'i.nil) , 



coding protocol can be denned as follows: 
Alice = <~a-1i 

Q<i<3 

def 

Bob = CB7q2.e?qi.CAf[qi,q 2 }.'H[qi].M[q 1 ,q2;x].d\x.nil, 
EPR = f Sei*[ qi ,q 2 }.CB\q2.CAlqi.nil, 
Sdc d = c?x.(EPR\\Alice\\Bob)\{c A ,c B ,e}. 

The specification of super-dense coding protocol can be defined as: 

SdCspec = clx.r 7 .Set x [qi,q2\.d\x.Toi\ 

where 

3 

Set x [qi,q2\-d\x.ri\\ = ^](if x = i then Sef[qi, q2j.dlx.r1il). 

i=0 

Here Set 1 and Set* are the 2-qubit super-operators which set the target qubits to \i) and 1^) = 
(|00) + lll))/-^, respectively. We insert seven r's in the specification to match the internal actions 
of Sdc. The qLTSs rooted from (\Sdc spec ,2-H\) and (\Sdc,2-n\) respectively are depicted in Fig. 5 where 
Q = {91 1 92}, A-^ is the super-operator with the single Kraus operator L = {ca,cb^}, 



Sdc x 



^2(ifx = i then o-%i].e!<zi.nil) I \\Bob j \{e}, 



,i=0 



and for simplicity, we only draw the transitions along the x = branch. 

To conclude this subsection, we prove some useful properties of symbolic transitions. 

Lemma 5.4. If (\t,£§ — ^> A, then there exist super- operators {Bj : i € 7} C CP{H) and {J^ : i € 
1} *!= CPt(H), and process terms {tj : i G /} C T such that 

(1) Zi&Bi-Iu, 

(2) A = J2 ieI B i *<\t i ,F i E\>, 
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iSdc,I H \) 



^Sdc spec ,l n ) 



tt. c>x 



tt.r' 



HSet x lql.d\x.nil,l n \) 




fldb.nil, SetEj t\d\x. nil, SetU fldte.nil, Sei|D (\d\x.nil Setp 



tt.dlx 



tt.d\x 



tt,d\x 



tt,d\x 



Jnil, SetB (nil, SetU JnU,Set||| (nil, Sei§|) 




i(Mlq i z].d\x.nil)\L,Set<l<$ 



Ju 

../In nil /- '' : fl(d!:i.nil)\L,0„D 
(]((i!l.nfl)\i,0«[) (|((i!2.nll)\£,0«[ 




tt.dlo 



tt,d!l 



)nil\L,0«( 



tt. ( /!2 



tt,d!3 



(nil\L, 0*|) 



Figure 5: qLTSs for d/SdCgpeo^HD and §Sdc,Tji\) 

(3) for any Q e CP t (H), $,Q) H • (fa.^SI). 

Especially, if\I\ > 1 then Bi and Ti take the forms as A- 1 and Set-' in Eqs.(2) and (3), respectively. 

Proof. Easy from the definition of inference rules. □ 
The following lemmas show the relationship between transitions in ordinary semantics and in 
symbolic semantics. Let ip be an evaluation, a G Act c , and 7 € Act s . We write a =w, 7 if either 
a = c\v, 7 = c!e, and VK e ) = f , or 7 = a if neither of them is a classical output. 

Lemma 5.5. Suppose (tip, p) i-^-> p,. Then there exist b, I, ip' , {Ai : i € 7} C CPijH), {£i : i £ 1} C 
CPt(H), and {ti : i S 7} C T, suc/i i/iat Eie/A ~^7«; a^d 

(ty for any £eCP t (H), $,E) ^ £. iG/ A • <\U,£i£h where 

(a) if a = c?w £/ien 7 = c?a; /or some x ^ fv(t), and ip' = tp{v/x}, 

(b) otherwise, 7 =^ a and ?/>' = 

Proof. We prove by induction on the depth of the inference by which the action (tip, p) | — * M i s 
inferred. We argue by cases on the form of t. 
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(1) t = clx.t' . Then tip = clx.u where u is the process term obtained from t' by instantiating all 
the free variables in fv(t') — {x} according to ip. By Rule C-Inp c we deduce that a = civ 
for some v G Real and p = (P, p) where P = u{v/x} = t'ip{v/x}. By Rule Act Sl for any 

S G CP t {H), we have <\t,S\) tt ^l x <\t',S\). So we need only to take b = tt, |/| = 1, U = t', 
Ai = Si = 1u ■ 

(2) t = c\e.t' . Then tip = c\ip(e).(t'ip), and by Rule C-Out c we deduce that a = c\ip(e) and 

"t"t c'e 

p = (t'ip,p). By Rule Act s , for any £ G CPt(H), we have (|f, £D — d^'j^D- So we need only 
to take b = tt, |/| = 1, ti = t', Ai = Si = lu as well. 

(3) t = clq.t 1 . Then tip = c?q.(t'ip), and by Rule Q-Inp c we deduce that a = clr for some 
r ^ and p = ({t'ip){r/q}, p). By Rule Act s and a-conversion, for any S G CP t {H), 

tt c?7" 

we have (|t , £"[) — H> dt'{r/g},f^. So we need only to take b = tt, |/| = 1, ^ = i'{r/q}, 
= f i = T-u ■ 

(4) i = M[q;x].t'. Then = M[q;x}.u where u is the process term obtained from t' by instan- 
tiating all the free variables in fv(t') — {x} according to ip. Let M = ^ ieI ^i\<Pi){<Pi\- By 
Rule Meas c we deduce that a = r and p = J2 ieI tr(Ai(p))(Pi, Si(p)) where Pj = u{Ai/x} = 
£'{Ai/x}V>, A = {|<fo)(</>i|}, and £% = {\<t>i){4>j\ ■ j e Take 6 = tt. By Rule Meas s , for any 
£ G CP t (H), we have (\t,S\) ^ £ ieJ .Ai • ^{Xi/x},SiS). 

(5) t = ti||*2- Then tip = t\ip\\t 2 ip. There are two sub-cases to consider: 

(a) The action is caused by one of the components, say (tiip,p) p x . Then we have 
qbv(a) n qv(t 2 ip) = 0, and p — pi\\t 2 ip. By induction, there exist b,I, U, Ai,£i, i G 
/, such that ip(b) = tt, pi = £ ieJ ti (Ai (p)) (Uip' , S i(p)}, and for any S G CP t (H), 

(|ti,£D SiG/-^« • d^ii^-i^-D- Note that by a-conversion, when 7 = clx, we can always 
take x such that x j£ fv(t 2 ), and consequently, (ti\\t 2 )ip' = tiip'\\t 2 ip. Finally, we have 

(\t,S\) -A Y, ieI Ai • <\ti\\t 2 ,SiS\), using Rule Par s . 

(b) The action is caused by a (classical or quantum) communication. Here we only detail the 

case when (tiip,p) (P\,p), (t 2 ip,p) ^ (Pi,p), a = t, and p = (P 1 \\P 2 ,p). Then 
by induction, there exist b\, b 2 , t[, t' 2 such that ip(b\ A b 2 ) = tt, Pi = t[ip', P2 = t' 2 ip, 

and for any S G C*P f (H), <\h,S\) h ^ <\t^S\) and fli 2 ,£|) ^ Qt^fD, where .t £ fv(h), 
ip' = ip{v/x}, and ip(e) = v. Thus 

(ii{e/x}||t 2 )V = t'^e/xjiPWt^ = t'Mv/xjWt^' = t'^'Wti.ip = Pi\\P 2 . 

Finally, we have <\t,S\) ^ (^{eMU^.f P, using Rule Q-Com s . 

(6) Other cases. Similar to the cases we discussed above. □ 

Lemma 5.6. Suppose A. Then there exist I, {A t : i G 1} C CP(H), {Si : i G /} C 

CPt(H), and {ti : i G /} C 7", swc/i t/iat r ^ fl?l ^ 

^ /or any ?/> and p, ?/»(&) = implies (tip,p) X^e/ tr(^4i(p))(tj^', Si(p)) where 

(a) if J — clx then a = civ for some v G Real, and -0' = ^{w/a;}, 
^ otherwise, 7 a and ?/»' = 0. 

Proof. Similar to Lemma 5.5. □ 
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5.3 Symbolic bisimulation 

Let S C SN x SN be an equivalence relation. We lift S to Vist n (SN) x Vist n (SN) by defin- 
ing ASS if for any equivalence class T G SW/S, A(T) ~ 3(T); that is, Eflt.^eT A (fl*> f D) ~ 
Eflt £D 6T 5((|£,£D). ^ e wr ite 7 =& 7' if cither 7 = c!e, 7' = c!e', and 6 — > e = e', or 7 = 7' if neither 
of them is a classical output. 

Definition 5.7. Lei © = {S b : 6 £ BExp} be a family of equivalence relations on SN . & is called 
a symbolic (open) bisimulation if for any b £ BExp, <\t,£\)S b <\u, J"D irnpl ies that 

(1) qv{t) = qv(u) and £ ~ qv (t) ^ ' * s SQtisfiable; 

(2) for any Q £ CP t (W qv ^ ), whenever <\t, Q£\) A with 6^(7) n fv(b, t, u) = 0, then there exists 
a collection of booleans B such that b A b\ — > \/ B and V b' £ B, 3^2, 7' wi£/i 6' — > 62, 7 =6' 7', 
(|u, S, and {Q£ • A)S b ' {QF • S). 

Two configurations (\t,£\j and flu, J 7 ^ are symbolically 6-bisimilar, denoted by <\t,£\) ~ b flu, J 7 !), if 
there exists a symbolic bisimulation 6 = {S b : b £ BExp} such that <\t,£\)S b l\u,J r \). Two quantum 
process terms t and it are symbolically fo-bisimilar, denoted by t ~ b u, if fli,2%[) ~ b flit,I^|). When 
6 = tt, we simply write t ~ it. 

To show the usage of symbolic bisimulation, we revisit the examples presented in Section 5.2 
to show that the proposed protocols indeed achieve the desired goals. Let A = {A; : i £ 7} be a 
set of disjoint subsets of snapshots. An equivalence relation S is said to be^ generated by A if its 
equivalence classes on the set of snapshots U; e / A are given by the partition A, and it is the identity 
relation on SN — UjgjAj. 

Example 5.8. (Example 5.2 revisited) This example is devoted to showing rigorously that the two 
ways of setting a quantum system to the pure state |0), presented in Examples 3.3 and 5.2, are 
indeed bisimilar. Let 

A = {flP^JQ,!^}, 

B = {^.nilSet^l^Set^^Q^Set^} 

and S' be the equivalence relation generated by {A, B}. It is easy to check that the family {S b : b £ 
BExp}, where S b = S' for any b £ BExp, is a symbolic bisimulation. Thus P ~ Q. 

Example 5.9. (Superdense coding revisited) This example is devoted to proving rigorously that 
the protocol presented in Example 5.3 indeed sends two bits of classical information from Alice to 
Bob by transmitting a qubit. For that purpose, we need to show that §Sdc spec ,Iu\) f\Sdc,Iu\). 
Indeed, let 

A = USdc spec ,l H \)ASdc,l H )}, 
B* = {(|i,£M«MD) =3}, 

Cf = {<\t, £) : <\t, £) along the branch of x = i, and d((\t, £\j) = k}, 

where d(t\t, £[)) is the depth of the node (\t,£\) from the root of its corresponding qLTS, < j < 4, 
< i < 3, and 5 < k < 10. Let Sf* be the equivalence relation generated by {A, B 1 , B 2 , B 3 , B 4 }, 
and Sf =i generated by {C\ : 5 < k < 10}. For any b £ BExp, let S b be S'f= l if b -B- x = i, 
if 6 -O- tt, and \6sn otherwise. Then it is easy to check that & = {S b : b £ BExp} is a symbolic 
bisimulation. 

In the following, we denote by S* the equivalence closure of a relation S. 
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Definition 5.10. A relation family & = {S b : b G BExp} is called decreasing, if for any b,b' G 
BExp with b — > b' , we have S b C S . 

Lemma 5.11. Let & = {S b : b G BExp} be a symbolic bisimulation. Then there exists a decreasing 
symbolic bisimulation it = {U b : b G BExp] such that for each b G BExp, S b QlA b . 

Proof Suppose & = {S b : b G BExp} is a symbolic bisimulation. For each b G BExp, let 

= (J{5 fo ' : b -> 6'} and W 6 = (W b )*. 

Obviously, il = {£/ b : 6 G BExp} is decreasing. We have to show that il is a symbolic bisimulation. 

Let b G BExp and £[)W b (|it, J 7 !). Note that U\ is both reflexive and symmetric. So W b is actually 
the transitive closure of IA\, and there exist n > 1 and a sequence of snapshots \ti,£i\), < i < n, 
such that flt,£|) = Jto.fol), 5«, J=D = <\t n ,8 n \), and for each < i < n-1, fli,, f.^^+i, For the 
sake of simplicity, we assume n = 2. That is, there exists i\s,G\) such that (\t, £\)S hl <\s, Q\)S b2 <\u, F\) 
with b — > b\ A 62. The general case is more tedious but similar. 

First we check that if b is satisfiable, then qv(t) = qv(s) = qv(u) and £ ~ g „( t ) 5 ~ qv(t) ^ ■ Now 

for any G CP t (?f^y), suppose (ji,^'£'D A with &u( 7 ) n fv(b\,t,u) = 0. By a-conversion, 
we may assume further that £w( 7 ) n fv(s) — 0. From l\t, £\jS bl <\s, Q\), there exists a collection of 
boolcans {c,; : 1 < i < n} such that &! A b\ — > V c i an< ^ f° r an y *> 3 c ii7i with c,; — > c[, 7 = Ci 7,;, 

(|s,£7'(?D — > B, and (£/'£ • A)<S Ci • 0). By a-conversion, we can again assume that for each i, 
bv{"fi) n fv(b2,s,u) = 0. Now by the assumption that (|s, Q\)S b2 (\u, there exists a collection of 
booleans {dij : 1 < j < Hi} such that 62 A c\ — > \Jjdij and for any dy, 3d^-, 7y with dy — > dy, 

7 y = di . 7<> flu,^ ^ J 5, and (Q'g . 6)S d -(£'.F. H). 
Now let 

B = {b A Cj A dy : 1 < i < n, 1 < j < n. t }. 

From the fact that b — s- b\ A 62, it is easy to check that b Ab[ \J B. For any c = 6 A c, A dy, we 

take c' = dy and 7' = 7y. Then c — > c' , 7' = c 7, and S. Furthermore, by the fact that 

c -> c, and the definition of U c , we have {Q'£m A)U c (g'g* 9) indeed. Similarly, (g'g»G)U c (g' T-S). 
Thus • I\)U c {g'F • S) as required. □ 

Lemma 5.12. Lei decreasing families @, = : & G BExp}, i = 1,2, be symbolic bisimulations. 
Then the family 6 = {(S?«S|)* : b G B-Ezp} is a/ so a symbolic bisimulation. 

Proof. Let & G BExp and (|t,£ DC^i^l)*^! -^I- Suppose there exist n > 1 and a sequence of 
snapshots (!*,,£,[), ^ — * — n ' sucn *^at fl^^D = d*o,£oD, dUj-^D = §t n ,£ n \l, and for each < i < n— 1, 

fiD^JiSj dij+i, ^i+iD- Again, for the sake of simplicity, we assume n = 1. That is, there exists 
(|s,£D such that fl*, f|)5f(|s, ^D5 2 b (|w, J"D- The rest of the poof follows almost the same lines of those 
in Lemma 5.11, by employing the assumption that 61 and 62 arc both decreasing. □ 

Lemma 5.13. Let & = {S b : 6 G BExp} be a symbolic bisimulation and c G BExp. Then 
& c = {U b = S bVc : 6 G BExp} is also a symbolic bisimulation. 

Proof. Easy from definition. □ 

Corollary 5.14. // b —> b' , then ^ b C ^ b . That is, the relation family {^ b : b G BExp} is 
decreasing. 

With the lemmas above, we can show that the family {^ b : b G BExp} is actually the largest 
symbolic bisimulation. 
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Theorem 5.15. (1) For each b £ BExp, ^ b is an equivalence relation. 
(2) The family {^ b : b £ BExp} is a symbolic bisimulation. 

Proof. (2) is direct from (1). To prove (1), let b £ BExp. Obviously, ^ b is reflexive and 
symmetric. To show the transitivity of ~ b , let (\t,£\) ^ b (|it, J 7 ]) and flu, .FD ^ b d s >^D- Then by 
definition, there exist symbolic bisimulations 6j = {S b : b £ BExp}, i = 1,2, such that fli, £\)S b l\u, 
and flu, T\)S%(\s,g\). By Lemma 5.11, we can assume without loss of generality that both ©i and ©2 
are decreasing, thus © = {(S^St!)* ■ b £ BExp} is also a symbolic bisimulation, by Lemma 5.12. So 

M~ 6 M. □ 

To conclude this subsection, we present a property of symbolic bisimilarity which is useful for 
the next section. 

Theorem 5.16. Let \t,£), flu, J 7 ]) £ SN and b £ BExp. Then <\t,£\, ~ fc flu, J]) «/ a^d onfy i/ 
fij = qv(u) and £ ~ qv ( t j J~, if b is satisfiable; 

(2) for any Q £ CPt(H qv ^ ), whenever i\t,Q£\) Ai| A wii/i bv(j) n fv(b,t,u) = 0, £/ien i/iere exist 
o collection of booleans B such that b A 61 — > V £> and V 6' £ _B, 3^2, 7' wit/i 6' — > 62,. 7 =6' 7',. 
flu, 0J| ^ S, and (G£ . A) ~ 6 ' {QT • S); 

f3j Symmetric condition of (2). 
Proof. Routine. □ 

5.4 Connection of symbolic and open bisimulations 

To ease notation, in the rest of the paper we use t, u to range over SN, and sometimes equate t with 
fli,£|), u w hh flu, J-\), A with X^e/^ • an d H with • (K? > -^j D without stating them 

explicitly. We also write 

(AiP)(p) =J2^(Mp))(U^,Si(p)) and (E^)(p)=J2^(p))(u^,T 1 (p)). 
iei je.J 

In particular, (tip)(p) = (tif>,£(p)} and (uip)(p) = (uip,!F{p)). The basic ideas of the proofs in this 
subsection are borrowed from [12], with the help of Lemma 5.5 and 5.6. 
Let © = {S b : b £ BExp} be a symbolic bisimulation. Define 

K e = {((iip)(fi), O/>)0)) ■ P 6 T>{H) and 3b,i>(b) = tt and iS b u}. 

We prove that 1Z& is an open bisimulation. To achieve this, the following lemma is needed. 

Lemma 5.17. Let © = {S b : b £ BExp} be a symbolic bisimulation, p £ D(H), and i/)(b) = tt. 
Then 

AS b E implies (Atp)(p) Tie (3V00 3 )- 

Proof. Suppose A = J2iei Ai • f\U,£i\), S = X^ej^j • fl^ji-^jD an d AiS b S. We decompose the 
set [A] U |~E] into disjoint subsets S±, ■ ■ ■ , S n such that any two snapshots are in the same Sk if and 
only if they are related by S b . For each 1 < k < n, let 

K k = {i £ I : <\U,£i\> £ S k } U {j £ J : <\ Uj , Frf £ S k }. 

Then 

E A ^ E B i- ( 4 ) 

i£K k ni j£K k n.J 
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For any p € T>{H) and tp such that tp(b) = tt, 

n 

(av>)(p) = 5>(A(p)K^,£i(p)> = £ E 



iS/ k=li£K k nI 



Er w Bf » E E tr^p))*^))^,^)). 

fc=i ^e^nJ tr WW) i£K k nij&K k nJ 



Similarly, we have 



(svooo = E tr (^(' 3 ))( u ^,-^(p)}=E E te<Piip))M,FM) 

jeJ k=ij&K h r\J 

= E^ T7TT1T E E tr(A(p))tr(B J (p))( % V,^(p))- 

fe=1 Ls^n/niAWJ ieK k m j<=K k nJ 

Note that by definition, if ttS b u then (tip)(p)lZe (uip)(p). It follows that for any 1 < k < n, i G 
if/,, n /, and j G iCfc n J, we have (t i tlj,£i(p))TZis(uj'tlj,J r j(p)}. Furthermore, by Eq.(4), we know 
E l eK k m^(Mp)) = T, j£ K k nM^j(p))- Thus (A0-)(p) TZ 6 (S^)(p) by definition. □ 

Lemma 5.18. Let (3 = {5 b : G BExp} be a symbolic bisimulation. Then lZ<s is an open 
bisimulation. 

Proof. Let (iip)(p)1Z<s(uip)(p). Then there exists b, such that ip(b) = tt and iS b u. Thus we have 

(1) qv(tip) = qv(t) = qv(u) = qv(uip), and tr qv{t4>) £(p) = tr,„( t ^)J"(p) from £ tz-^^J 7 . 

(2) For any £ G CP f (H^), let 

(t^,gs(p))^p. 

Then by Lemma 5.5, we have 

<\t,g£\) ^ A' = E A • fc&QS) 
iei 

such that tp(bi) = tt, 

fi = '£ix(A i g£(p))(tiil> , ,SiGe(p)). 
iei 

Furthermore, we have 7 = clx for some x ^ fv(t) and tp' = ip{v/x} if a = civ, or 7 =^ a 
and tp' = ip otherwise. Note that if 7 = clx, we can always take x such that x fv(t, u, b) by 
a-conversion. Now by the assumption that iS b u, there exists a collection of booleans B such 
that b A bi -> \J B and V b' G B, 36 2 , 7' with 6' -> 6 2 , 7 =6' 7', 

and (0£ • A')5 6 ' • 3'). Note that 0(6 A 61) = tt and b Ab± \J B. We can always find a 
6' G B such that 0>(6') = tt, and so "0(62) = tt as well. Then by Lemma 5.6, we have 

where j3 = civ and tp" = tp{v/x\ if 7' = clx, or 7' =^ j3 and "0" = "0 otherwise. 
We claim that j3 = a, and tp" = tp'. There are three cases to consider: 
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(i) a = civ. Then 7 = clx and ip 1 = ip{v/x}. So 7' = clx by definition, which implies that 
j3 = civ = a, and ip" = ip{v/x} = ip' . 

(ii) a = civ. Then 7 = c!e, ip(e) = v, and 1/'' = ip. So 7' = cle' with 6' — > e = e', which 
implies that /3 = c!u' where v' = ip(e'), and ip" = ip = ip 1 . Finally, from ip(b') = tt we 
deduce v' = v. 

(hi) For other cases, /3 = 7' = 7 = a, and ip" = ip = ip'. 

Finally, by Lemma 5.17 we deduce pJZ&v from the facts that (QS • A')S b {QJ 7 • S') and 
ip'{b')=tt. □ 

Corollary 5.19. Let b G BExp, t,uG T, and P,Q eV. Then 

(1) t ^ b u implies for any evaluation ip, if ip(b) = tt then tip ~ uip. 

(2) t ~ u implies t ~ u. 

(3) P ^ b Q implies P ~ Q, provided that b is satisfiable. 

Proof. (2) and (3) are both direct corollaries of (1). To prove (1), let t ~ 6 u, and 6 = {5 b : 
b G BExp} be a symbolic bisimulation such that d£,Z%D<S & (|u,I-HD. ^' ien ^ Lemma 5.18, for any 
evaluation ip and any p, ^(6) = tt implies (tip,p) ~ (uip,p). Thus £?/> ~ w-0 by definition. □ 

For any 6 G BExp, define 

S b ^ = {(t, u) : Vip, ^(6) = tt implies that for any p G T>(U), (tip)(p) ~ 

We prove that © ^ = {5 6 ^ : & G BExp} is a symbolic bisimulation. Firstly, it is easy to check that 
for each b, S b ^ is an equivalence relation. Two quantum states p, a G D(H) are said to be equal 
except at g if tTqP = tr^er. Then we can show the following lemma, which is parallel to Lemma 5.17. 

Lemma 5.20. Let b G BExp. If for any evaluation ip, 

ip{b) = tt implies that Vp G T>(H), (Aip)(p) ~ (Eip)(p), 

then A S b ^ E. 

Proof. Let A = ^ ieJ Ai • (\U,£i\) and H = Y^jejBj • d^j'j-^j'D- We prove this lemma by distin- 
guishing two cases: 

(1) Both |/| > 1 and |J| > 1. Similar to Lemma 5.17, we first decompose the set [A] U into 
disjoint subsets S%, - ■ ■ , S n such that any two snapshots are in the same Sk if and only if they 
are related by S b ^ . For each 1 < k < n, let 

K k = {iel: (MP G U e J : K".-^ € Sfc} (5) 

and ^ = {Kk : 1 < k < n}. Note that by Lemma 5.4, there are two sets of pairwise orthogonal 
pure states {\<pi) : i E 1} and {\4>j) '■ 3 <= i n some Hq such that the Kraus operators of 
Ai and Si are {|</>i)(<^i|} and {\4>i){(pi'\ '■ i' G /}, respectively, while the Kraus operators of Bj 
and J 7 , are {\<p'j)(<p'j\} and : .7' G J}, respectively. Let £ fc = Y,ieK k m I0i)(0»l> and 

Fk = J2jeK k nJ \ < l ) j)( ( f'j\- Then it suffices to show Ek — Fk, 1 < k < n. In the following, we 
prove Ei = Fi; other cases are similar. 

For any p and ip such that ip(b) = tt, we decompose the set \(Aip)(p)~\ U \(E.ip)(p)] into 
equivalence classes R\, ■ ■ ■ , R m *i> according to ~ . For each 1 < I < rrijj, let 

L'P P = {i€l: (Uyj,S l (p)) G Rt} U {j G J : (u^,^(p)) G i?;} 
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and &>p = {Lf' p : 1 < I < R m i p }- Note that by definition, & is a refinement of &> p for any 
ip(b) = tt and p. We assume without loss of generality that Lf' p is the partition in £^' p which 
contains K±, and L'f ' p = K\ U A'f ' p where Kf' p = Ufcei^ p -^p * s a su bset of {2, • • • , n}. 
As the effects of the super-operators Ai and Bj are simply erasing the original information 
at if and setting the partial states of q to be |0i) and \4>'j), respectively, we have Z^' p = Z^' a 
(which means = mf, and Lf' p = Lf' a for each I) for all a which is equal to p except at q. 
Note that tr(Ai(p)) = tr(|0j)^(0,|/5) = tr (\4>i)q(4>i\pq) where Pq = tr~p is the reduced state of p 

at the systems q. Let E{ ' p = J^kei^, p ^ k anc ^ ^1 = J2kei^, ^k- Then for any p' G V(^i~), 

tr((E 1+ Et>») P ')= Yl tr(A(a))= £ trfo (cr)) = tr((^ + 

ieLf-"ni jeLf>°nJ 

where a = p 1 ® tr^(p) is equal to p except at q, and the second equality is from the assumption 
that (Aip)(a) ~ (H^)(a). This implies E 1 + Ef' p =F 1 + F?> p . 

Let K = fl i/>(6)=tt We claim that K — 0. Otherwise, there exists k such that k G I^, p 
for any ip(b) = tt and p. Then by the definition of Lf' p , we have (tiip,£i(p)) ~ {ti>ip,£i'(p)) 
where i G -ft'i and i' G -fTfc. Thus <\t i ,£ i \)S b Aj contradicting the fact that they belong 

to different equivalence classes of S ^ . 

Now for any pure state |0) such that -&l|</>) = |0), we have Ff' p |</>) = for any p and 
V>0) = tt, by the orthogonality of E^s. Thus Ff' p \(f>) = \cj>) - Fi|0). Note that Ff' p 'Ff' p = 
E fc ^n Vy ^ = «' / Wehave 

w) = i0)-w), 

and finally, £fcei? F fc |0) = |0) - Fi|0). Then Fi|0) = |0) from the fact that K = 0. Similarly, 
we can prove that for any | 0) , i*i 1 0) = | 0) implies E\ | 0) = 1 0) . Thus Fi = F\ , 

(2) Either |/| = 1 or |J| = 1. Let us suppose |/| = 1, and A = (|i , £*[) . We need to show that for 
each j G J, Bj ^ 0-h implies <\t,£\)S b ^ (\v,j,Fj\). This is true because otherwise we can find 
■00) = tt, j G J, and p G V(H) such that tr (Bj(p)) ^ but (tip,£(p)) (ujip^F^p)). Thus 
(A?/>)(p) a contradiction. □ 

Lemma 5.21. The family 6 ~ = {5 b ^ : G BExp} is a symbolic bisimulation. 

Proof. Let b G BExp and t5 fa ^ u. Then for any ijj, ip(b) = tt implies that for any p G T>(H) : 
(ttp)(p) ~ (u-0)(p). Thus we have 

(1) If 6 is satisfiable, then <?t>(i) = qv(tip) ~ qv{uip) = qv(u), and £ ~ gt ,( t ) from the fact that 
tV( t )£(p) = tr g „ (t) J'(p) for any p. 

(2) For any Q G CP t (H^), let 

|t,^^A' = ^ii. , £&£) (6) 

iGI 

with 6^(7) n fv(b, t, u) = 0. We need to construct a set of booleans B such that b A b\ — > \J B, 
and Vi'eB, 3b 2 , 7' with 6' -> b 2 , 7 =6' 7', Ju, GF) S', and (^f • A')5 b ' • S'). Let 

[/ = {6 : flu, ^ ' (e H (0) 6 and 7 =ff 7(©)}- 
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Here similar to [12], to ease the notations we only consider the case where for each 6, there is 

at most one symbolic action, denoted by (6(6), 7(6)), such that ^,0^ fc ^ e L^ e ' q p or e&ch 
O G U, let 6q be a boolean expression such that for any 0, 



0(6' ) = tt if and only if for any p, (Q£ • A'0)(p) ~ (QT • ©0)(p) (7) 
where ip — ip{v/x} for some v if 7 = c?a;, and ip = ip otherwise. 

Let -B = {&e : 6 G J7}, where 6e = 6g A &e A 6(6) and 6q is a boolean expression defined by 

„ _ \ e = e' if 7 = c!e and 7(6) = c!e' are both classical output, . . 

Oq = \ (8) 
I tt otherwise. 

Then obviously, 7 =b e 7(6). We check 6 A &i — > V-B. For any evaluation -0 such that 
■0(6 A 61) = tt, we have by definition of S b ^ that (tip,£(p)) ~ (uip, IF (p)) for any p. On the 
other hand, by Lemma 5.6 and Eq.(6), we obtain 

(tri>,ge(p)) ^ p = Y,te(AiQ£{p)){utf ,£iGe{p)) 

iei 

where a = civ and ip 1 = ip{v/x} if 7 = clx, and a =^ 7 and 0' = ip otherwise. To match this 
transition, we have 

(uip, GT(p)) i-A v 

for some f such that p ~ za Now from Lemma 5.5, there exists 3' € {/ such that 0(6(3')) = tt, 

1/ =S tr (Si^(p))(« 3 y , ) ^i^(p)>. 

Furthermore, we have 7(3') = c?y for some y g" fv(u) and 0" = ip{v/y} if a = c?u, and 
a =^ 7(3') and -0" = otherwise. 

We claim that 7 =w, 7(3'), and 0" = 0'. There are three cases to consider: 

(i) 7 = clx. Then a — civ and 0' = 0{w/a;}, which implies that 7(2') = c?y for some 
y ^ fv(u). By a-conversion and the fact that x (jL fv(b,t,u), we can also take y = x. So 
7(H') = 7, and 0" = 0{u/a;} = 0'. 

(ii) For other cases, 7(3') =^ a =^ 7, and ip" = = 0'. 

Now we have p = (Q£ • A'0')(p) and v = (QF • S'0')(p). From the arbitrariness of p, we 
know ip(b'~,) = tt from Eq.(7). By Eq.(8) and the fact that 7 =^ 7(3'), we further derive that 
0(6^,) = tt. Therefore, V(fe') = tt, and so 0(V-B) = tt. 

For any 6e G £>, we have &e —> 6(6), 7 =b(e) 7(6), and l\u,QF^ ^_i2>. @ definition 
of B. Finally, for any evaluation 0, if 0(6e) = tt then 0(6' e ) = tt, and from Eq.(7) we 
have {Q£ • A'0)(p) ~ (QF • 60)(p) for any p G Then (££ • A')S fce (£J" • 6) follows 

by Lemma 5.20. Here we have used that fact that x ^ fv(b,t,u) implies tip{v/x} = tip and 
uip{v/x} = tip. □ 

Lemma 5.22. If for any evaluation ip, 0(6) = tt implies tip ~ uip, then t ~ b u. 
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Proof. For any p £ D(7i) and any evaluation ip such that tp(b) = tt, we first derive (tip, p) ~ (utp, p) 
from the assumption that tip ~ w0. Then by Lemma 5.21, we have (\t,I^i\) ^ b (\u,I-n\), and thus 
t ~ b u by definition. □ 

From the above lemmas, we finally reach our main result in this section. 

Theorem 5.23. Let 6 £ BExp, t,u£T, and P,Q eV. Then 

(1) t ^ b u if and only if for any evaluation ip, tp(b) = tt implies tip ~ uip. 

(2) t ~ u if and only ift^u. 

(3) P ~ b Q if and only if P ~ Q, provided that b is satisfiable. 

6 An algorithm for symbolic ground bisimulation 

From Clause (2) of Definition 5.7, to check whether two snapshots are symbolically bisimilar, we are 
forced to compare their behaviours under any super-operators. This is generally infeasible since all 
super-operators constitute a continuum, and it seems hopeless to design an algorithm which works 
for the most general case. In this section, we develop an efficient algorithm for a class of quantum 
process terms which covers all existing practical quantum communication protocols. To this end, 
we first define the notion of symbolic ground bisimulation which stems from [18]. 

Definition 6.1. A family of equivalence relations {S b : b £ BExp} is called a symbolic ground 
bisimulation if for any b £ BExp, (\t, £ \)S b l\u, J-| implies that 

(1) qv(t) =qv(u), and£ T, 

(2) whenever §t,£§ -^-t A with 611(7) H fv(b,t,u) = 0, then there exists a collection of booleans 

B such that b A b\ — > \J B and V b' £ B, 362,7' with b' — > 62. 7 =y l' , (\u, J 7 ]) -^-4 H, and 
(£*A)S b ' (J - .-). 

Given two configurations l\t,£\) and <\u, we write (\t,£\) ~ b ^u,T\) if there exists a symbolic 
ground bisimulation {S b : b £ BExp} such that (|t, £\)S b <\u, J 7 ). 

Definition 6.2. A relation S on SN is said to be closed under super- operator application if(\t, £ \jSt\u, J 7 ^ 
implies (\t, Q£])S(\u, Q T\ for any Q £ CPt(H qv ^ )- A family of relations are closed under super- 
operator application if each individual relation is. 

The following proposition, showing the difference of symbolic bisimulation and symbolic ground 
bisimulation, is easy from definition. 

Proposition 6.3. ~ is the largest symbolic ground bisimulation that is closed under super- operator 
application. 

A process term is said to be free of quantum input if all of its descendants, including itself, 
can not perform quantum input actions. Note that all existing quantum communication protocols 
such as super-dense coding [3], telcportation [2], quantum key-distribution protocols [1], etc, are, or 
can easily modified to be, free of quantum input. Putting this constraint will not bring too much 
restriction on the application range of our algorithm. 

Lemma 6.4. Let (|t, £|) ^ b g (\u,F\), and t and u both free of quantum input. Then for any Q £ 
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Proof. We need to show & = {S b : b G BExp}, where 



S b = {(faGS^MJ^) ■ t and u free of quantum input, Q G CP t {%-^), and <\t,£\) ~£ fltt.-Fl)}, 

is a symbolic ground bisimulation. This is easy by noting that for any descendant t' of t, qv(t') C 
qv(t), and then Q G CPAH — tttt) as well. Consequently, Q commutes with all the super-operators 
performed by t and its descendants. □ 

Theorem 6.5. If t and u are both free of quantum input, then i\t,£\) ^ b d^-^l) */ an d only if 

Proof. Easy from Lemma 6.4. □ 

Algorithm 1 computes the most general boolean b such that t ^ b u, for two given snapshots t 
and u. By the most general boolean mgb(t, u) we mean that t ^™ s& ( l ' u ' u anc l whenever t rJ> g u 
then b — > mgb(t, u). From Theorem 6.5, this algorithm is applicable to verify the correctness of all 
existing quantum communication protocols. 

The algorithm closely follows that introduced in [12]. The main procedure is Bisim(t, u). It 
starts with the initial snapshot pairs (t, u) , trying to find the smallest symbolic bisimulation relation 
containing the pair by comparing transitions from each pair of snapshots it reaches. The core 
procedure Match has four parameters: t and u are the current terms under examination; b is 
a boolean expression representing the constraints accumulated by previous calls; W is a set of 
snapshot pairs which have been visited. For each possible action enabled by t and u, the procedure 
MatchAction is used to compare possible moves from t and u. Each comparison returns a boolean 
and a table; the boolean turns out to be mgb(t, u) and the table is used to represent the witnessing 
bisimulation. We consider a table as a function that maps a pair of snapshots to a boolean. The 
disjoint union of tables, viewed as sets, is denoted by U. 

The main difference from the algorithm of [12] lies in the comparison of r transitions. Wc 
introduce the procedure MatchDistribution to approximate ~£ by a relation 1Z. For any two 
snapshots ti G [A] and Uj £ [0] , they are related by 7Z if b — >• T(U, Uj). More precisely, we use the 
equivalence closure of 1Z instead in order for it to be used in the procedure Check. Moreover, if a 
snapshot pair (t, u) has been visited before, i.e. (t, u) G W, then T(t, u) is assumed to be tt in all 
future visits. Hence, 1Z is coarser than ^ b in general. We use Check(A, 0, 1Z) to computate the 
constraint so that the super-operator valued distribution A is related to by a relation lifted from 
1Z. The correctness of the algorithm is stated in the following theorem. 

Theorem 6.6. For two snapshots t and u, the function Bisim(t,u) terminates. Moreover, if 
Bisim(t,u) = (6,T) then T(t,u) = 6 = mgb(t,u). 

Proof. Termination is easy to show. Each time a new snapshot pair is encountered, the procedure 
Match is called and the pair is added to the set W. Since we are considering a fmitary transition 
graph, the number of different pairs is finite. Eventually every possible pair is in W and each call 
to Match immediately terminates. 

Correctness of the algorithm is largely similar to that in [12], though we use the additional 
procedure MatchDistribution to compute the constraint that relates two super-operator valued 
distributions. □ 

7 Modal characterisation 

We now present a modal logic to characterise the behaviour of quantum snapshots and their distri- 
butions. 
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Algorithm 1: Bisim(t, u) 

Bisim(t, u) = Match(t, u, tt, 0) 

Match(t, u, b, W) = where i=$,E) and u = flu, J| 

if (t. u) G W then 
| (0,T) : = (tt.0) 
else 

for 7 G Act{i,u) do 
|_ (# 7 ,T 7 ) := MatchAction(7, t, u, 6, W) 

_ (8,T) := (A 7 9 7 , U 7 (r 7 U{(t,u)^(6AA 7 « 7 )})) 

return (0 A (gv(t) = qv(u)) A (£ F),T) 

MatchAction(7, t, u, b, W) = 
switch 7 do 
case c! 

for t iL ^>' t; and u - — > u, do 
|_ (0«,3fy) := Match(ti, Uj, b A b, A 6^ A e< = e' } , {(t, u)} U TV) 

_ return (A*(b< Vj(*S A = e$ A fly)) A frffl -> Vi(&« A * = e$ A %)), |Jy fy) 

case r 

for t — Ai and u — > Qj do 
I (0y,Ty) := MatchDistribution(A,.e j , b A b, A b' p {(t.u)} U W) 

_ return (A,(6, -f Vj(*4 A %)) A A^ -f Vi(*>* A %)). |_|y 2y) 
otherwise 

for t — > U and u — > Uj do 

|_ (fly.ly) := Match(tj, Uj, b Ab t A b' p {(t, u)} U W) 
_ return (Ajfa -f V,,^ A %)) A Aj(*5 V,(fc A %)), Uy Ty) 

MatchDistribution(A, 9, b, W)= 

for t; G [A] and U, G [0] do 
L {Oij,Tij) := M&tch.{%Uj,b,W) 
K:={(t,u) \b^(U ij T ij )(t, U )}* 
return (Check(A, G, K), UyTy) 

Check(A,6,ft) = 6 := tt 
for 5 G [A] U \&]/n do 
L £> := 6 A (A(S) ~ 0(5)) 
return 



Definition 7.1. T/ie class C of quantum modal formulae over Act s , ranged over by <f>, etc, is 
defined by the following grammar: 

::= Q~a 1-0 1 /\4>i\Q4\ (7>* 

iG/ 

$ ::= Q>^(0) | 

where Q G CPt(H), 7 G Act s , and .A G CP(H). We call <j> a snapshot formula and <f> a distribution 
formula. 

The satisfaction relation |= C EV x (SN U T>istu{SN)) x C is defined as the minimal relation 
satisfying 

• Vj 1 1= Qq if gi>(i) n 9 = 0, and £ 0, where t = <\t, £) ; 
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• ip, 1 1= f\ ieI 4>i if ip, i \~ <t>i for each i E I; 

. V, t h 04 if e CP t (H^j) and fli, ^ 1= 0, where t = fli, £}; 

• 1 1= (7)$ if t A for some 6, 7', and A, such that ip(b) = tt, 7 7', and ?/>, A |= $; 
. V,A^Q>^(^) if 

]T {A(t) : <M h 0} > -A; 

• ^, A |= (f> l if V', A |= $j for each i E L 

Definition 7.2. Lei ^1 6e an evaluation. We write t =£ u if for any <p E C, 

ip, t |= <j) if and only if ip, 111=0. 

Similarly, A =£ 3 if for any $ E £, 

A |= $ i/ and only if ip, E |= $. 

Lemma 7.3. Lei ip be an evaluation, t, u <G SiV, and A,S £ Vistu{SN) . 

(1) If t u, then there exists (p E C, such that ip, t J= <p but ip, u ^ 0; 

(%) J/ A 7^ S, i/ien i/iere exists $ e C, such that ip, A |= $ 6ui V: s ^= 

Proof. (1) is easy as we have negation operator -1 for state formulae. To prove (2), let A 7^ E, 
and $ a distribution formula such that ?/>, A Y= $ but t/>,H (= We construct another distribution 
formula $' satisfying A |= $' but ^, 5 ^= $' by induction on the structure of $. 

(i) $ = Q>^(0). Let 

S = {ue SN : ip,u\= <fi} and S = SN - S. 

Then by definition, 5(5) > A but A(5) £ A Let B = A(S) and $' = Q> e (^0). Then we 
have trivially ip, A |= Now it suffices to show ip, E ^= <£>'. Otherwise, we have > £>, 

and then 

L« ~ 5(5) + 5(5) >A + B. 

On the other hand, we have 

l n ~ A(S) + A(S) = A(S) + B. 
Comparing the two formulae above, we conclude that A(5) > A, a contradiction. 

(ii) <f> = f\ ieI $i- Then by definition, ip,E \= for each i El but ip,A ty= $ io for some z € L 
By induction we have $- o such that ip,A\= $- o but ip,E ^= 4>- . For any i 7^ i , let $■ = <3> t 
if "0, A (= <I>i, and otherwise it is determined by applying induction on Let $' = f\ iGl 
Then V, A f= $' but ip,Eft&. □ 

With this lemma, we can show that the logic C exactly characterises the behaviours of quantum 
snapshots up to symbolic bisimilarity. 

Theorem 7.4. Let t and u be two snapshots and b E BExp. Then t ~' u i/ and only if for any 
evaluation ip, ip(b) = tt implies t =£ u. 
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Proof. We first prove the necessity part. For any 0, $ € C, it suffices to prove the following two 
properties: 

V t, u, 0, if t — b u and 0(6) = tt then 0, t \= cf> 0, u |= 0, 

V A, S, V, if A ~ b E and 0(6) = tt then 0, A |= $ ^ 0, S 1= 

We proceed by mutual induction on the structures of and $. Take arbitrarily t ~ b u, A ~ b S, and 
0(6) = tt. Let t = (\t,£\), U = flu, J 7 !), 0, 1 1= 0, and 0, A |= There are seven cases to consider: 

• = Then gi;(t)n<7 = and £ ~q <7. Since t ^ b u and 6 is satisfiable, we have qv(t) = qv(u) 
and £ ~ g „(t) Thus n g = 0, and J 7 C/ from the fact that q C qv(t). Then ip,u\= Gq 
follows. 

• = -i</>'. Then i/;, t ^= 0'. By induction we have 0, u 0', and 0, u |= 0. 

• = /\ iG j 0-s- Then 0, 1 1= 0j for each i £ I. By induction we have 0,U |= 0i, and 0,u |= 0. 

• = Q4'. Then Q e CP t {U-^) and 0,£(t) |= 0'. Since t ~ b u, we have £(t) ~ b G(u) by 
Proposition 6.3, and qv(t) = qv(u). By induction we have ip,G(u) (= 0', and 0,u |= 0. 

• (p = (7)$'. Then t A' for some 61, 7', and A' such that 0(6i) = tt, 7 = X f > 7', and 
ip, A' |= $'. Since t ^ b u, there exists a collection of booleans B such that b A 61 — s- V-S 

and V 6' e B, 36(6'), 7(6') with 6' -> 6(6'), 7' = 6 - 7(6'), U b(fc ^H (fc,) and A' ~ b ' E'. Note 
that 0(6 A 61) = tt. We can find a b' £ B such that -0(6') = tt. Thus 0(6(6')) = tt, and 
7 =^ 7(6'). Furthermore, by induction we have 0, E' |= <&' from A' ~ b E' and 0, A' |= $'. So 
0,u h (t)*'- 

• $ = Q>^(0'). Let 5 = {t e SN : 0, t |= 0'}- Then by definition, A(S) > A. Furthermore, by 
induction we can see that S is the disjoint union of some equivalence classes Si, • • ■ , Sk of ~ . 
Thus 

E(S) = S(Si) + ■ ■ • + S(S fc ) ~ A(5i) + ■ ■ • + A(S fc ) = A(S) > -4 
where the ~ equality is derived from the assumption that A ^ b E. 

• $ = Aie/ Then 0, A (= for each i 6 I. By induction we have 0, 3 |= $i, and 0, S (= $. 

By symmetry, we also have 0,u |= implies 0, t |= and 0, S |= $ implies 0,A |= $. That 
completes the proof of the necessity part. 

We now turn to the sufficiency part. By Lemma 5.21, we need only to prove that t =t u implies 
(t0)(p) ~ (u0)(p) for all p e V(H). Let 

Tl = {((t0)(p),(u0)(p)) :peV(n),ip€EV, and t =£11} 

It suffices to show that TZ is an open bisimulation. Suppose (t0)(/3)7?.(u0)(p). Then t = t u, and 

qvitiji) = qv(t) = qv(u) = qv(uip). 

We further claim that ti qv ^ t )£{p) = ^qv{t)^{p)- Otherwise there exists qC qv(t) such that £ rfcq T. 
Then 0, 1 1= £q while 0, u Y= £q, a contradiction. 

Now let (t0)(p) >—> p. By Lemma 5.5 we have t -^3> A M such that 0(6i) = tt, p = (A (tt 0')(p), 
and 

(1) if a = c?w then 7 = c?x for some x £ fv(i), and 0' = ip{v/x}, 
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(2) otherwise, 7 a and ip' = ip. 
Let 

JC = {v € Dist(Con) : (uip)(p) 1/ and p flv}. 
For any v € /C, by Lemma 5.5 we have u — > S„ such that = tt, = (S„t/>")(/3), and 

(1) if a = civ then 7(Sjy) = clx for some 2; ^ fv(u), and "0" = ^{^Z 2 -}) 

(2) otherwise, 7(2,,) a and ip" = ip. 

Here again, to ease the notations we only consider the case where for each S, there is at most one 
pair, denoted (&(S), 7(5)), such that u — > S. Furthermore, by a-conversion, we can always 
take 7(S„) =^ 7 and ip" = ip' . For any v £ /C, we claim A M 7^ H„. Otherwise, since /i = (A M , 0')(p) 
and v = (S„-0')(p), we have plZv, a contradiction. Thus, from Lemma 7.3 (2), there exists G £ 
such that 0, A M |= $, y but ^,H„ ^ $„. Let 

$ M = Ai $ - : ^ e /C} and = ( 7 >$ M . 

Then ip, A M (= $ M and ip,t\= p>- Since t =£ u, we have ip,u\= p> too. That is, there exists O such that 

0(6(6)) = tt, 7 =^ 7(8), and 9 |= $ M . Now by Lemma 5.6, we have (uip)(p) ^ lo = (Qip"')(p) 
such that 

(1) if 7(6) = clx then a' = civ for some v <G Real, and ip" 1 = ip{v/x}, 

(2) otherwise, a' =y, 7(6) and -0"' = ip- 

By transition rule C-Inp c , we can alway choose a' = a, and 0>"' = ip' . We claim that lu ^ K.. 
Otherwise, if oj S K then 0>,S U <J> U , and "0,5^ ^= as well. This is a contradiction since by 
assumption, S u = O. So w ^ /C, and /i7?.aj as required. 

Finally, we prove that 1Z is closed under super-operator application. To this end, we only need to 
show that =£ is ; that is, for any Q <G CPt(H qv ^ ), t =£ u implies G(i) =£ G(u)- Suppose t =£ u and 

let be a formula such that ip, G(i) \= 0- Then ^0, t j= Q.p. It follows from t =£ u that qv(t) = qv(u) 
and ip,u |= Q.p. Therefore, ip,Q(u) |= 0. By symmetry if is satisfied by ip,Q{u) then it is also 
satisfied by ip,Q(i). In other words, we have G{i) =£ G{u). Then 1Z is an open bisimulation by 
Proposition 5 of [6]. □ 
For any t,u e T and b G BExp, we write t = b c u if for any evaluation ip, ip(b) = tt implies 
(\t,I-u\) =c d u ?^wD- Then we have the following theorem: 

Theorem 7.5. For any t,u 6 T, t ^ b u if and only if t = £ u. 

8 Conclusion and further work 

The main contribution of this paper is a notion of symbolic bisimulation for qCCS, a quantum 
extension of classical value-passing CCS. By giving the operational semantics of qCCS directly by 
means of the super-operators a process can perform, we are able to assign to each (non-recursively 
defined) quantum process a finite super-operator weighted labelled transition system, comparing 
to the infinite probabilistic labelled transition system in previous literature. We prove that the 
symbolic bisimulation in this paper coincides with the open bisimulation in [6], thus providing a 
practical way to decide the latter. We also design an algorithm to check symbolic ground bisimu- 
lation, which is applicable to reasoning about the correctness of existing quantum communication 
protocols. A modal logic characterisation for the symbolic bisimulation is also developed. 
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A natural extension of the current paper is to study symbolic weak bisimulation where the 
invisible actions, caused by internal (classical and quantum) communication as well as quantum 
operations, are abstracted away. To achieve this, we may need to define symbolic weak transitions 
similar to those proposed in [8] and [6] . Note that one of the distinct features of weak transitions for 
probabilistic processes is the so-called left decomposibility; that is, if /i =>■ v and fi = ^2 ie jPilJ>i is 
a probabilistic decomposition of fi, then v can be decomposed into YlieiPi^i accordingly such that 
/Xj => Vi for each i <E I. This property is useful in proving the transitivity of bisimilarity. However, 
it is not satisfied by symbolic transitions defined in this paper, since, in general, a super-operator 
does not have an inverse. Therefore, we will have to explore other ways of defining weak symbolic 
transitions, which is one of the research directions we are now pursing. 

We have presented in this paper, for the first time in literature to the best of our knowledge, 
the notion of super-operator weighted labelled transition systems, which serves the semantic model 
for qCCS and plays an important role in describing and reasoning about quantum processes. For 
the next step, we are going to explore the possibility of model checking quantum communication 
protocols based on this model. As is well known, one of the main challenges for quantum model 
checking is that the set of all quantum states, traditionally regarded as the underlying state space of 
the models to be checked, is a continuum, so that the techniques of classical model checking, which 
normally works only for finite state space, cannot be applied directly. Gay et al. [9, 10, 17] provided 
a solution for this problem by restricting the state space to a set of finitely describable states called 
stabiliser states, and restricting the quantum operations applied on them to the class of Clifford 
group. By doing this, they were able to obtain an efficient model checker for quantum protocols, 
employing purely classical algorithms. The limit of their approach is obvious: it can only check the 
(partial) behaviours of a protocol on stabiliser states, and does not work for general protocols. 

Our approach of treating both classical data and quantum operations in a symbolic way provides 
an efficient and compact way to describe behaviours of a quantum protocol without resorting to the 
underlying quantum states. In this model, all existing quantum protocols have finite state spaces, 
and consequently, classical model checking techniques will be easily adapted to verifying quantum 
protocols. 
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